Mock Exam Flashcards
GPG Reference: 23
Which of the following is an outcome of assigning roles and responsibilities as part of business continuity policy and programme management?
Training requirements for roles and responsibilities are identified and reviewed in the business continuity policy.
Recruitment requirements are identified and documented in the business continuity policy.
Clear reporting requirements are identified and documented in the business continuity policy.
Roles and responsibilities, and authorities are documented in the business continuity policy.
Roles and responsibilities, and authorities are documented in the business continuity policy.
GPG Reference: 14
Who should support, approve, and own the business continuity policy?
Stakeholders.
Top management.
Steering Committee.
Business continuity manager.
Top management.
GPG Reference: 98
When undertaking a review of a business continuity programme, which of the following is a basic type of review?
Financial.
Debrief.
Supplier performance.
Risk assessment.
Supplier performance.
GPG Reference: 90
A test is defined as a _____type of exercise which incorporates an expectation of a pass or fail element within the goal or objectives of the exercise being planned. (Please select one choice to correctly complete the sentence)
Realistic
Regular
External
Unique
Unique.
GPG Reference: 34
When undertaking training and awareness activities, which of the following should you consider?
Changes in the organization’s website and social media plans.
Changes in actual or perceived threats and vulnerabilities.
Changes to the tactical and operational aspects of business continuity.
Changes to the communication channels in the organization.
Changes in actual or perceived threats and vulnerabilities.
GPG Reference: 47
Which outcome is associated with the process business impact analysis (BIA)?
Identification of any processes that have been outsourced by the organization and therefore present an increased risk.
Identification of any processes that have not been documented by the organization and therefore present an increased risk.
Identification of any processes that have not been risk assessed by the organization and therefore present an increased risk.
Identification of any processes that have not been signed off by top management and therefore present an increased risk.
Identification of any processes that have been outsourced by the organization and therefore present an increased risk.
GPG Reference: 70
Which of the following is a key requirement for implementation of an effective business continuity plan?
An ability to recognise and assess existing and potential threats when they occur and to determine an appropriate response.
An ability to measure the length of time that must be allowed following an incident before the organization can initiate recovery of resources.
An ability to document and monitor the possible effects of mitigation measures to effect long-term change and reverse adverse trends.
An ability to monitor the accuracy of risk assessments for an organization and consider longer-term business continuity requirements.
An ability to recognise and assess existing and potential threats when they occur and to determine an appropriate response.
GPG Reference: 16
When developing a business continuity policy, what should be included?
A statement of governance and stakeholder commitment to the policy including reporting requirements.
Details of the other policies, processes, and procedures that should be provided by the organization.
Roles and responsibilities for the business continuity programme including an incident response capability.
A definition of business continuity for use in the organization and a list of the members of the crisis management team.
Roles and responsibilities for the business continuity programme including an incident response capability.
GPG Reference: 32
The assessment of competencies and skills should extend to all ________ who work at the organisation’s site or who provide incident related services. (Please select one choice to correctly complete the sentence)
Contractors.
Suppliers.
Accountants and auditors.
External Bodies.
Contractors.
GPG Reference: 82
What should tactical plans mainly focus on?
Coordinating the response to an incident and facilitating the continuity of prioritised activities.
The information and data required to implement the plan when delivering products and services.
A step by step flow chart for managing the response to a physical disruption, event or incident.
Guidance for prioritising recovery that reduces the need for top management to be involved.
Coordinating the response to an incident and facilitating the continuity of prioritised activities.
GPG Reference: 62
What are the key requirements to enable remote working?
Stable electric power and other utilities, adequate ICT facilities, appropriate data security, and a suitable work space to conduct business activities.
Risk assessment documentation to check whether the remote workplace meets health and safety legislation as well as suitable internet connectivity.
Maintaining communication with homeworkers through email, telephone, or video conferencing, and regular face-to-face meetings.
Holding regular meetings in the organization’s designated office, as this can help with keeping in touch with the rest of the business.
Stable electric power and other utilities, adequate ICT facilities, appropriate data security, and a suitable work space to conduct business activities.
GPG Reference: 25
What does a business continuity management programme consist of?
Measurement of alignment to current legislation.
Defined response roles for all staff across the organization.
Ongoing budget commitment and financial support.
The business continuity exercise budget and schedule.
Ongoing budget commitment and financial support.
GPG Reference: 51
Which of the following is NOT a key step when undertaking a risk and threat assessment as part of the business continuity programme?
Prioritise the threats based on the risk score for the prioritised activities.
Implement detailed cost and mitigation measures.
Share the outcomes with the relevant interested parties.
Identify unacceptable areas of risk, which may include single points of failure.
Implement detailed cost and mitigation measures.
GPG Reference: 70
What does the response structure establish?
Command, control, and communication systems to help the organization manage the incident and minimise the impact of the disruption.
The organization’s documented processes and procedures to ensure they are effective and signed off by top management.
Command and control financial exposure to protect interested parties as defined by the organization’s top management.
The point at which the organization’s data and information must be restored to enable activities to operate effectively.
Command, control, and communication systems to help the organization manage the incident and minimise the impact of the disruption.
GPG Reference: 16
How frequently should the business continuity policy be reviewed?
At monthly review meetings with the relevant stakeholders.
At pre-agreed intervals or following significant changes.
Annually on the anniversary of when it was approved.
At quarterly review meetings with the relevant stakeholders
At pre-agreed intervals or following significant changes.
GPG Reference: 18
Which one of these factors will help prompt decisions on which products and services to include in the scope of the business continuity policy and programme?
A scenario exercise.
A policy requirement.
A third party supplier process.
A Physical Threat.
A Physical Threat.
GPG Reference: 32
Which of the following is an accurate step to ensure that the appropriate level of awareness, education and training is established for successful embedding?
Identify the necessary commitment required by staff selected to take on the role within the business continuity programme.
Create a detailed job description for the business continuity role, including a list of tasks, competencies skills and experience.
Review the current roles of the staff selected for a business continuity role and establish if additional responsibility will impact the business.
Determine the training and awareness needs with learning outcomes for all individuals involved in the business continuity programme.
Determine the training and awareness needs with learning outcomes for all individuals involved in the business continuity programme.
GPG Reference: 63
Which of the following is an important consideration when setting up adequate separation distance between the original and duplicate resources that form the basis of the business continuity solution?
Keeping duplicate copies of vital resources in a remote location.
Duplicating staffing to ensure parallel operations.
Requesting suppliers take on liability of activities on your behalf.
Access to 24 hour public transport links between the sites.
Keeping duplicate copies of vital resources in a remote location.
GPG Reference: 34
Competence reviews following training and awareness activities can be assessed by using which ONE of the following?
Review crisis reports in the media.
External training record comparison.
Observing exercises.
Group coaching.
Group coaching.
GPG Reference: 63
When selecting a safe separation distance between original and duplicate resources that form the basis of the business continuity solution, which one of the following is the most important factor?
Copying documentation to enable activities to be run in duplicate.
If insurance will recover all costs associated with the new location.
Regulatory approval of the location you will be operating from.
How far personnel are able or willing to travel to a relocation site.
How far personnel are able or willing to travel to a relocation site.
GPG Reference: 19
What does governance for business continuity primarily focus on?
Monitoring and reviewing the business continuity programme regularly to ensure the requirements are being met.
Monitoring and reviewing the risk assessment processes regularly to ensure the requirements are being met.
Monitoring and reviewing business continuity training regularly to ensure the requirements are being met.
Monitoring and reviewing the business continuity finances and budget to ensure the requirements are being met.
Monitoring and reviewing the business continuity programme regularly to ensure the requirements are being met.
GPG Reference: 21
To ensure business continuity related tasks are carried out by assigned individuals appropriately, roles and responsibilities should be integrated into:
Monthly reports.
Pay rises.
Job descriptions.
Training records.
Job descriptions.
GPG Reference: 58
The solution design process includes identifying suitable solutions that enables the achievement of:
MTPD, RPO and RTO.
MBCO, MTPD and RTO.
MBCO, RPO and RTO.
MBCO, MTPD and RPO.
MBCO, RPO and RTO.
GPG Reference: 23
What is an ongoing management and governance process supported by top management and appropriately resourced to implement and maintain business continuity management?
Business Continuity System.
Business Continuity Programme.
Business Continuity Lifecycle.
Business Continuity Solutions.
Business Continuity Programme.
GPG Reference: 19
A detailed _______ is carried out in the Analysis stage of the business continuity management lifecycle. (Please select one choice to correctly complete the sentence)
Staffing-level review.
Risk Assessment.
Policy Review.
Cost-benefit assessment.
Risk Assessment.
GPG Reference: 45
Which ONE of the following is an outcome of a “product/service” business impact analysis (BIA)?
Consider and identify appropriate business continuity strategies to review.
Determine the products or services to be included in the business continuity programme.
Products and services to risk assess as part of the business continuity programme.
Evaluation of impacts over time.
Evaluation of impacts over time.
